Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.mft
File:                     sA4l9V67rLBp8QOssIZnA4Nc_M0.mft (raw, json)
Hash identifier:          oe6FXy7mD5ZiacY1TaTIg4+gZG4nuUHuz7PsafJFGHs=
Subject key identifier:   D5:32:5C:A6:6D:DD:44:A9:A5:C5:40:5C:60:B4:85:34:B5:FB:ED:7E
Authority key identifier: B0:0E:25:F5:5E:BB:AC:B0:69:F1:03:AC:B0:86:67:03:83:5C:FC:CD
Certificate issuer:       /CN=b00e25f55ebbacb069f103acb0866703835cfccd
Certificate serial:       019EC4B8766297DB8EAF3DADB1F9E918283F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sA4l9V67rLBp8QOssIZnA4Nc_M0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.mft
Manifest number:          1569
Signing time:             Sun 14 Jun 2026 06:01:23 +0000
Manifest this update:     Sun 14 Jun 2026 06:01:23 +0000
Manifest next update:     Mon 15 Jun 2026 06:01:23 +0000
Files and hashes:         1: IxO99c5pFhRvUksjCk8RGNZdHys.roa (hash: axX2zCX5EaVP+cgNK0AwafDUwd4UVfumU6doP/6YeJg=)
                          2: sA4l9V67rLBp8QOssIZnA4Nc_M0.crl (hash: IN3FUD5lemG+DmKn2OUDVi7OYM1502FQ08bFXXdAeFM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sA4l9V67rLBp8QOssIZnA4Nc_M0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Jun 2026 06:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c4:b8:76:62:97:db:8e:af:3d:ad:b1:f9:e9:18:28:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b00e25f55ebbacb069f103acb0866703835cfccd
        Validity
            Not Before: Jun 14 06:01:23 2026 GMT
            Not After : Jun 15 06:01:23 2026 GMT
        Subject: CN=d5325ca66ddd44a9a5c5405c60b48534b5fbed7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d1:21:b3:e6:b8:e9:70:6e:4e:78:e1:51:d6:
                    9c:a0:88:25:b4:c3:af:60:7a:ba:5b:d2:28:a9:3f:
                    05:8a:21:7f:9f:06:b3:94:64:ff:57:63:05:d8:34:
                    dc:65:20:26:04:85:62:04:2e:ad:b2:f0:fd:36:d4:
                    36:e5:53:27:19:ba:33:77:1e:d4:8e:c1:50:78:5c:
                    e4:e8:94:71:8c:3b:d7:d3:e2:88:14:31:a4:42:a3:
                    21:18:29:a4:38:d6:20:2e:37:82:3c:ef:78:1f:ab:
                    f9:95:06:30:e6:85:2f:42:5d:d0:78:40:bc:cb:b3:
                    e0:b6:4c:e6:64:e0:f7:6f:fa:51:ba:b7:83:95:60:
                    be:eb:84:9b:58:f9:b5:b6:80:40:bb:de:3d:a9:30:
                    e1:d7:81:b6:37:72:44:d1:32:6b:d2:17:d7:ac:6f:
                    e4:d1:60:cd:f6:3f:24:00:01:ca:77:c2:2a:a1:76:
                    48:14:6d:0e:49:c2:45:13:8d:bc:e7:a0:64:e0:e1:
                    36:b8:f1:03:3c:da:f0:68:81:5f:4b:b0:ac:a3:17:
                    13:de:b9:5a:d3:65:7e:7d:44:3f:1d:50:6d:fd:51:
                    71:56:54:e1:01:93:0a:ed:49:3c:97:10:35:9b:04:
                    ba:1d:c2:85:32:b3:12:11:90:ba:96:d4:ba:09:c1:
                    79:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:32:5C:A6:6D:DD:44:A9:A5:C5:40:5C:60:B4:85:34:B5:FB:ED:7E
            X509v3 Authority Key Identifier:
                keyid:B0:0E:25:F5:5E:BB:AC:B0:69:F1:03:AC:B0:86:67:03:83:5C:FC:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sA4l9V67rLBp8QOssIZnA4Nc_M0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:b8:bd:34:df:3e:00:56:b5:2d:e3:f8:1a:b2:7a:40:86:df:
         a5:76:76:dc:c9:8a:89:af:3b:76:01:d5:e3:20:32:03:b0:c5:
         fe:53:c4:a5:00:6e:3e:b6:16:1a:d7:03:69:53:36:84:fe:a8:
         dc:33:b4:7a:cc:67:11:f3:e5:ea:3c:7d:d5:b9:85:30:54:6b:
         d7:1e:5f:6d:cd:0e:1f:c2:ff:8e:95:d4:c3:2e:07:3b:bd:8f:
         37:ae:af:15:5b:b9:78:04:c6:47:a1:a0:b7:1b:9f:29:59:99:
         a3:78:06:50:6c:6c:97:0a:26:c7:5f:96:8d:fa:ad:10:f4:b1:
         63:8b:ad:48:a6:09:00:d3:64:f2:37:b5:6c:42:9f:dc:8c:d3:
         04:b2:0c:59:9a:d2:4a:84:d8:e2:81:92:55:f6:75:ee:84:74:
         5c:45:43:d7:28:3d:a2:04:af:39:4a:93:a8:31:de:89:ef:f4:
         34:43:da:e6:ae:1d:35:03:82:8f:72:04:b9:5d:a2:35:e9:ea:
         68:47:ce:9a:70:a4:f1:78:dd:0b:7f:fc:82:99:18:fc:21:85:
         76:c0:78:5f:d2:59:d9:1e:b2:9d:d4:50:41:d8:fb:b3:df:f7:
         6f:a6:0c:2d:b6:b4:93:84:64:bf:8d:96:83:6a:43:bc:7f:78:
         4e:83:6b:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7EuHZil9uOrz2tsfnpGCg/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwMGUyNWY1NWViYmFjYjA2OWYxMDNhY2IwODY2NzAzODM1
Y2ZjY2QwHhcNMjYwNjE0MDYwMTIzWhcNMjYwNjE1MDYwMTIzWjAzMTEwLwYDVQQD
EyhkNTMyNWNhNjZkZGQ0NGE5YTVjNTQwNWM2MGI0ODUzNGI1ZmJlZDdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNEhs+a46XBuTnjhUdacoIgltMOv
YHq6W9IoqT8FiiF/nwazlGT/V2MF2DTcZSAmBIViBC6tsvD9NtQ25VMnGbozdx7U
jsFQeFzk6JRxjDvX0+KIFDGkQqMhGCmkONYgLjeCPO94H6v5lQYw5oUvQl3QeEC8
y7PgtkzmZOD3b/pRureDlWC+64SbWPm1toBAu949qTDh14G2N3JE0TJr0hfXrG/k
0WDN9j8kAAHKd8IqoXZIFG0OScJFE42856Bk4OE2uPEDPNrwaIFfS7CsoxcT3rla
02V+fUQ/HVBt/VFxVlThAZMK7Uk8lxA1mwS6HcKFMrMSEZC6ltS6CcF5/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNUyXKZt3USppcVAXGC0hTS1++1+MB8GA1UdIwQY
MBaAFLAOJfVeu6ywafEDrLCGZwODXPzNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0E0bDlWNjdyTEJwOFFPc3NJWm5BNE5jX00wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8zMWEwZWMtZDliOC00OWU0LWI0MzYt
OGI0MjE1ZTU4MDI4LzEvc0E0bDlWNjdyTEJwOFFPc3NJWm5BNE5jX00wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS8zMWEwZWMtZDliOC00OWU0LWI0MzYtOGI0MjE1ZTU4MDI4
LzEvc0E0bDlWNjdyTEJwOFFPc3NJWm5BNE5jX00wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQri9NN8+
AFa1LeP4GrJ6QIbfpXZ23MmKia87dgHV4yAyA7DF/lPEpQBuPrYWGtcDaVM2hP6o
3DO0esxnEfPl6jx91bmFMFRr1x5fbc0OH8L/jpXUwy4HO72PN66vFVu5eATGR6Gg
txufKVmZo3gGUGxslwomx1+WjfqtEPSxY4utSKYJANNk8je1bEKf3IzTBLIMWZrS
SoTY4oGSVfZ17oR0XEVD1yg9ogSvOUqTqDHeie/0NEPa5q4dNQOCj3IEuV2iNenq
aEfOmnCk8XjdC3/8gpkY/CGFdsB4X9JZ2R6yndRQQdj7s9/3b6YMLba0k4Rkv42W
g2pDvH94ToNrrg==
-----END CERTIFICATE-----
Generated at Sun Jun 14 16:20:44 2026 by rpki-client